From 7905dd00a629991840f28250e41bdcb31691acf6 Mon Sep 17 00:00:00 2001
From: endymx <345793738@qq.com>
Date: Wed, 5 Feb 2025 18:37:42 +0800
Subject: [PATCH] =?UTF-8?q?fix(firewall):=20=E5=88=A0=E9=99=A4=E5=A4=8D?=
 =?UTF-8?q?=E6=9D=82=E8=BD=AC=E5=8F=91=E8=A7=84=E5=88=99=E6=97=B6=E6=8A=A5?=
 =?UTF-8?q?=E9=94=99=20(#7791)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 backend/utils/firewall/client/iptables.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/backend/utils/firewall/client/iptables.go b/backend/utils/firewall/client/iptables.go
index e299c89f4..e691b0036 100644
--- a/backend/utils/firewall/client/iptables.go
+++ b/backend/utils/firewall/client/iptables.go
@@ -192,8 +192,9 @@ func (iptables *Iptables) NatRemove(num string, protocol, srcPort, dest, destPor
 	// 删除公网转发规则
 	if dest != "" && dest != "127.0.0.1" && dest != "localhost" {
 		if err := iptables.runf(NatTab, fmt.Sprintf(
-			"-D %s -p %s --dport %s -j DNAT MASQUERADE",
+			"-D %s -p %s -d %s --dport %s -j MASQUERADE",
 			PostRoutingChain,
+			dest,
 			protocol,
 			destPort,
 		)); err != nil {